Recent submissions

Comment · 12 days ago
controls aren't important, upgrade/tech choices are
Comment · 14 days ago
Why is anything worth anything?

The short but final answer: because other people want it.

Comment · 17 days ago
Fake xcode tools injecting malicious code into dev's apps: https://9to5mac.com/2015/09/20/xcode-ghost-app-store-malware...

Fake zoom updates: https://www.malwarebytes.com/blog/scams/2026/02/fake-zoom-me...

NPM supply chain attack targeting cryptowallets: https://www.paloaltonetworks.com/blog/cloud-security/npm-sup...

More software means more complexity means more pathways to losing.

Can you do it? Sure. I'm sure there are millions of dollars in private keys stored on internet connected laptops somewhere out there. But the best practices remain the same: as little internet as possible, as little software as possible.

Comment · 17 days ago
Using a consumer pc, risk wouldn't come from hardware hack implementations, it would be mostly software.

To continue with your example, "display sniffing" could be done by infecting trusted software or software presented as trustworthy (fake or infected Zoom binaries, Xcode binaries, etc.) or injected through open source dependencies like npm packages.

Yes, you or I might be paranoid enough to check the checksum hash to make sure the open source code matches the build. But every time, for everything?

The less connected it is, the safer. The less software it runs, the safer.

Comment · 17 days ago
Right, so now you need an additional device on hand (your phone) to parse the QR code into a string. Or I guess you could activate your hot laptop's webcam, pick up your cold laptop, crank the brightness up, point it towards your webcam, and capture the QR like that.

Sounds kinda clunky.

Comment · 17 days ago
Yes, you can certainly use an air gapped laptop as a dedicated hardware wallet.

But now you need to generate a public key to send to someone so you can receive coins. How are you sending that key to your friend? Are you going to read character by character and manually type up the string?

It's all tradeoffs.

Comment · 17 days ago
Your general purpose computer is connected to the internet 24/7. It runs a complex operating system which constantly gets updated and patched. It visits dodgy websites, downloads npm packages, backs up files to the cloud, etc.

Thus the attack surface is far greater.

Comment · 1 month ago
why would the entire country be "needing" to change its composition?
Comment · 1 month ago
2016 https://www.nippon.com/en/features/h00174/

~70% of int'l marriages in Japan are Japanese men + foreign brides.

Of the women marrying foreign husbands, 25.7% Korean, next is 16.7% American, then 12.5% Chinese.

Comment · 1 month ago
You mean western dudes who fetishize/exotify eastern women?
Comment · 1 month ago
If the extended family incorporates other races, does it stop being extended family?
Comment · 1 month ago
“Bloodline dilution” is only a thing if you believe your race is superior.
Comment · 2 months ago
Carbon tax would shift the economics in favor of renewables.
Comment · 5 months ago
Unfortunately I feel this was inevitable as GoPro did not stay on top of hardware design.

DJI and Insta360 offer compelling products. And budget, lower quality 1080p-4k action cams got eaten by Akaso and other clones.

Comment · 6 months ago
The data center money was private capital put up by individuals and corporations willingly. They are seeking to provide a product (compute) to paying consumers.

You can have an opinion on whether or not AI/data centers are worthwhile, but ultimately it wasn't made by your money.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton